v0.1.8

What's Changed

• supply-chain: govulncheck in CI + base-image digest pin (Phase 2.5) by @sricola in #26
• supply-chain: reproducible binaries + make verify-build (Phase 2.4) by @sricola in #27
• reliability: HTTP timeouts, fail-closed mint, loud cleanup (sprint batch 1) by @sricola in #28
• chore: hygiene cleanup (sprint batch 5) by @sricola in #29
• perf: drydock tasks — stat-once sort + tail-read summarize (sprint batch 3) by @sricola in #30
• perf: gateway streaming-meter (no full-body buffer) (sprint batch 2) by @sricola in #31
• reliability: graceful brokerd shutdown — no orphaned VMs (sprint batch 4) by @sricola in #32
• release: v0.1.8 — hardening (reliability, performance, supply chain) by @sricola in #33

Full Changelog: v0.1.7...v0.1.8